Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7rS8NoyFxfmBpM4mQbUrt4dAXWM.roa
File: 7rS8NoyFxfmBpM4mQbUrt4dAXWM.roa (raw, json)
Hash identifier: 3fU+NZwsN6ibAqOPxynEhJWl8SZ6TBhsHYcwFF7Y8Bc=
Subject key identifier: EE:B4:BC:36:8C:85:C5:F9:81:A4:CE:26:41:B5:2B:B7:87:40:5D:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D5B46DCD27924C48443589CAF275DCC5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7rS8NoyFxfmBpM4mQbUrt4dAXWM.roa
Signing time: Tue 08 Aug 2023 15:11:58 +0000
ROA not before: Tue 08 Aug 2023 15:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:b4:6d:cd:27:92:4c:48:44:35:89:ca:f2:75:dc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 15:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeb4bc368c85c5f981a4ce2641b52bb787405d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:6a:20:31:09:c3:d0:35:e6:0a:4d:47:b6:
c0:db:32:44:9d:ff:ee:1c:39:ec:8c:fe:6b:0d:67:
b3:1b:4e:08:c6:59:cd:e9:48:5d:4e:fa:fc:df:23:
18:d3:07:88:3b:18:92:8f:ca:6f:17:65:ca:3a:3a:
81:b6:6e:32:a7:a0:28:1c:c1:fd:2b:d4:ad:fe:3e:
db:db:dc:89:46:5d:15:f3:4c:3f:0f:ba:91:5e:13:
28:00:0a:95:55:2f:90:07:ec:81:ea:36:35:a9:21:
bb:6b:bf:fd:8b:80:b3:d4:15:bb:01:56:bb:cf:ad:
3e:15:2f:ec:e6:62:1d:4e:db:fd:14:13:df:b8:a1:
a3:61:31:50:45:9f:16:b1:92:6c:e1:22:b3:12:07:
5e:d1:8a:11:bd:67:10:ea:1b:8f:ed:f1:c5:c5:45:
cf:65:d1:f4:fc:b0:58:b6:d2:53:cb:c1:a7:c5:4e:
0b:23:a5:87:47:c1:9c:b2:da:0b:33:63:f3:fe:bc:
15:c0:27:17:96:ad:2d:15:10:01:a3:4f:45:ea:b0:
30:e4:45:23:6b:22:75:3a:23:1a:43:90:97:f3:79:
72:50:5e:5f:70:4d:5c:7c:dd:9c:bf:50:b1:e2:76:
55:11:38:1f:01:ec:eb:c4:0f:bd:30:18:03:9c:e0:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B4:BC:36:8C:85:C5:F9:81:A4:CE:26:41:B5:2B:B7:87:40:5D:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7rS8NoyFxfmBpM4mQbUrt4dAXWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:7a:fd:89:7d:b1:81:77:d1:ff:b0:fb:17:c4:74:3b:79:0c:
df:3e:24:7f:33:e8:f2:20:c1:d2:f4:5e:6b:48:33:15:6d:ae:
29:8c:c5:68:2f:e7:79:3c:1d:ed:53:2f:8b:ca:78:4c:bd:70:
f1:f8:a2:cc:ae:1e:29:8b:2a:51:9b:6f:95:fd:41:38:f2:87:
0b:35:1d:d5:94:c5:97:8d:a0:46:69:69:48:03:46:4e:1a:54:
aa:fe:0b:08:80:85:3c:59:52:ed:ee:01:3b:b5:fa:4f:b4:4c:
f4:0c:50:f5:5e:e2:5d:d6:eb:09:8d:fc:cf:78:f9:6c:0d:f3:
cc:30:a5:c0:75:90:07:74:dd:64:27:56:c4:47:96:87:4d:6b:
1f:18:08:c7:72:b0:12:d4:a3:fb:91:b5:af:8f:de:5e:67:a8:
90:04:93:68:b9:f2:6d:a5:d8:1d:f7:3f:93:c0:fc:e9:5e:64:
8d:1b:ee:6c:c0:75:45:e2:eb:32:4a:04:47:ce:90:b0:b2:5b:
41:e1:11:e6:f6:95:1b:7c:0a:db:2a:c8:35:68:82:dc:e7:7d:
4c:81:9c:72:dd:48:4a:22:f7:e2:fa:b3:a4:b1:f2:76:e7:60:
ab:da:1a:51:04:7d:9e:b3:58:3a:75:db:ad:f1:42:86:6f:8a:
c6:81:0a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:07 2025 by rpki-client